CVE-2026-54121

PoC ×2—

CVSS 3.1

8.8 high

EPSS

2%p77

Published

Jul 14, 2026 (Jul 14, 2026)

Modified

Jul 21, 2026

Description

Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.

Vendors: microsoft
Products: windows 10 1607, windows 10 1809, windows server 2012, windows server 2016, windows server 2019, windows server 2022, windows server 2025
Weakness: CWE-285
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news5 stories

Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released

Help Net SecurityAug 2, 00:00 UTC · Aug 2, 2026Data breach CVE-2026-54121 CVE-2026-63077 CVE-2026-20316+1 CVEs

60

⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More

The Hacker NewsJul 28, 05:26 UTC · Jul 28, 2026Exploit / PoC in the wildCVE-2026-16232 CVE-2025-66376 CVE-2026-54121+52 CVEs

60

Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller

The Hacker NewsJul 28, 04:01 UTC · Jul 28, 2026Exploit / PoC in the wildCVE-2026-54121

60

PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)

Help Net SecurityJul 27, 00:00 UTC · Jul 27, 2026Exploit / PoC CVE-2026-54121

60

Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Cisco TalosJul 15, 14:52 UTC · Jul 15, 2026Vulnerability in the wildCVE-2026-56155 CVE-2026-56164 CVE-2026-50370+89 CVEs

60